Auto logged in after logging out and reloading page

[nikita-cerejo]

I have enabled auto_login as I need the user to stay logged-in even after reload.
I am using prosody as my xmpp server.

To Reproduce
Steps to reproduce the behavior:

1. Login using xmpp address and password and save the credentials in browser (by clicking on key icon)
2. After successful login, click on logout button
3. After getting redirected to login page, wait for a minute or whatever bosh/websocket timeout set
4. Reload the page. You are auto logged in back.

Expected behavior
After clicking logout and refreshing page after more than c2s_close_timeout/bosh_max_inactivity seconds, I should stay on login page and not auto logged in.
(In case of websocket - c2s_close_timeout - How long to wait after closing a session to wait for the client to disconnect
In case of bosh - bosh_max_inactivity - Maximum amount of time in seconds a client may remain silent for, with no requests)

Environment:

• Desktop
• Browser - Chrome (latest version)
• Converse.js version 9.0.0

Do let me know if any more information needed about the issue.

---

Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.